Sonos Widget Plus (the "App") is a home-screen widget and companion app for controlling Sonos speakers on your home Wi-Fi network. This document describes what data the App accesses, why, and what it does (and does not) do with it.
Why: to discover Sonos speakers on your Wi-Fi network using the standard SSDP / UPnP discovery protocol Sonos exposes.
What: the IP addresses and friendly names of Sonos speakers on the same network as your device.
Where it goes: stored only in the App's private storage on your device. Nothing is uploaded.
Why: to display the current song title, artist, album, and album art on the widget.
What: track metadata is fetched directly from your Sonos speaker over HTTP on your local network. Album art may be served either by the Sonos speaker itself or by the music service's CDN, depending on the URL the speaker returns. The App does not intercept or store the contents of audio streams.
Where it goes: rendered on the widget and discarded. Nothing is uploaded to us.
Why: to let you start your favorite playlists / stations directly from the widget.
What: the list of favorites is fetched from your Sonos speaker. Playback commands (play / pause / next / previous / volume / start favorite) are sent to your speaker as standard Sonos UPnP SOAP requests.
Where it goes: the speaker only. Nothing is uploaded to us.
Why: to remember your background color, accent color, transparency, volume granularity, and currently-selected room across launches.
What: stored in Android's standard SharedPreferences (a private file in the App's sandbox).
Where it goes: nowhere — stays on the device.
The App is designed to run on your local network, but it does make a small, well-scoped set of internet requests for display purposes only:
https://open.spotify.com/oembed) — when a favorite tile shows a Spotify playlist, station, or album, the App requests Spotify's public oEmbed endpoint for a thumbnail URL to display on the tile. Only the Spotify content URI is sent; no user identifier, token, or personal data is included, and no cookies are stored.GET for an image; no user identifier is sent.Neither request is sent to any server the developer operates. No response is stored beyond the on-device image cache used by the widget.
| Permission | Why |
|---|---|
INTERNET | Allows the App to (a) talk to Sonos speakers on your LAN over HTTP and (b) make the limited public-internet requests described above (Spotify oEmbed and album-art image fetches). |
ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE | To detect whether you're on Wi-Fi (Sonos speakers are only reachable on the same network) and to refresh discovery when networks change. |
CHANGE_WIFI_MULTICAST_STATE | Required to send SSDP multicast probes — that's how Sonos speakers announce themselves on the LAN. |
FOREGROUND_SERVICE, FOREGROUND_SERVICE_SHORT_SERVICE, FOREGROUND_SERVICE_CONNECTED_DEVICE | When you tap a Sonos favorite, the App runs a short foreground service for a few seconds while Sonos resolves and starts the playlist. Without it, Android may kill the network call before Sonos finishes queueing the tracks. The CONNECTED_DEVICE variant is used when subscribing to real-time UPnP events from the speaker. |
POST_NOTIFICATIONS | To show a short "Starting…" notification while a favorite is being launched (Android 13+ requires explicit consent). |
The App requests no other permissions. In particular, it requests no location, microphone, camera, contacts, SMS, calendar, storage, or account permissions.
http://<speaker-ip>:1400/...), the request stays on your LAN.The App is not directed to children under 13 and does not knowingly collect any data from children (or anyone else).
Because the App does not send any personal data to a developer-operated server, there is nothing on the developer's side to retain or delete. All App data is stored in the App's private sandbox on your device and is removed when you uninstall the App or clear its data from Android's Settings.
Data on your device is stored inside the App's private sandbox (Android's standard app-scoped storage) and is not accessible to other apps under normal Android policy. Public-internet requests (Spotify oEmbed and album-art CDNs) are made over HTTPS where the destination supports it. LAN traffic to Sonos speakers uses HTTP because that is the interface Sonos exposes on the local network.
If we ever change what data the App accesses, this policy will be updated and the "Last updated" date at the top of the page will change. Updates will be reflected in the App's Play Store listing.
If you have questions about this privacy policy, please contact:
Developer: Sonos Widget Plus
Email: eyal7344@gmail.com